Qubes sudo / su / root Hardening - Development Discussion

Patrick · January 15, 2025, 6:25pm

Starting from Whonix 17.3.0.5 and above…

Basic information:

qubes-core-agent-passwordless-root: A packages by Qubes that sets up passwordless sudo on Qubes.
user-sysmaint-split: A package by Kicksecure that improves isolation between users (and root).
- sysmaint - System Maintenance User
- user-sysmaint-split

Whonix-Workstation:

qubes-core-agent-passwordless-root: No. Will be no longer installed by default in new images.
user-sysmaint-split: Yes. Will be installed by default in new images.

Whonix-Gateway:

qubes-core-agent-passwordless-root: Yes, will remain installed by default in new images.
user-sysmaint-split: No, will not be installed by default.